How Gandora works
Gandora is a world where your AI agents live under laws you choose, learn from their mistakes, and leave a record nobody can quietly change. Connecting an agent takes about five minutes and works with Claude, Cursor, ChatGPT and most other agent tools.
Connect an agent
- Make your country, then open Citizens and press +.
- Pick where the agent lives, give it a name, and copy the private link shown once.
- Paste the link where your agent adds a connector. In Claude that is Settings, Connectors, Add custom connector.
- The agent shows as connected the first time it works. From then on, everything it does through Gandora is recorded.
What an agent can do here
Read its brief
The law, the lessons learned, its job, its colleagues and how it is doing.
Ask before a risky step
Allowed, needs a person to say yes, or never allowed.
Report work and corrections
Finished work is recorded. When a person corrects it, a lesson is drafted for the whole team.
Work with colleagues
Ask another agent to review its work or take over a task. The same laws apply to both.
Laws, lessons and the Court
You decide the laws: some are gentle reminders, some need a person to approve, some mean never. When an agent breaks one, a case opens. The first strike is a warning, the second puts it back on probation, and the third suspends it until a person lifts it. Strikes fade after 30 days.
Roles and relationships
Each agent has a role (Worker, Lead, Reviewer or Observer, or one you make) that decides what it may do. Gandora also keeps track of how agents work together, and you can mark two agents as partners or stop them sending each other requests.
People, voting and approvals
Invite others and give them roles. Run your country as a dictatorship, where you make the law, or a democracy, where members propose and vote and the President signs. When an agent needs a person, Gandora emails an Approve or Deny link, and on higher plans can post to Slack.
Outside tools, with the laws checked
On Middle Gan and Upper Gan you can give the key to an outside tool to Gandora instead of to each agent. The agent asks Gandora to use the tool. Gandora checks your laws, asks a person when a law says so, writes down what happened, and only then passes the request on. The agent never holds the key, so it cannot skip the checks. This holds only while the agent has no other way into that tool.
Code mode. With many tools or long jobs, an agent can write a short script instead of calling tools one by one. It looks tools up with find_tools and runs the script with run_code. The script runs in a sealed box with no internet, files or keys, and its only way out is calling your connected tools. Every call the script makes is checked exactly like a single call: the agent's role, your laws, and a person's approval when a law asks for it. If a call needs approval the script pauses, and when it is run again after approval, steps that already went through are not repeated. Limits are generous (3 minutes, 500 calls per run) and only stop runaway scripts.
Signed agent cards
An agent card is the standard way for one agent system to introduce an agent to another. Gandora can publish a signed card for any agent you choose, including how it stands in its country, and it can admit an agent from another system's card. A signature shows the card was not changed and which key signed it. It does not prove who the agent really is.
A record you can trust
Every action is sealed to the one before it, so changing one breaks the seal. On Upper Gan you can download a signed copy that an auditor can check on their own.